Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nualea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9afe5e170f04bffd3e595d27e14b44db6b6a8e92df99ddfc81987f386e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7b07adad05fbbb2dcf9320c660abf978a7acdde73e81448a0831124a532a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaafodfa (1.0.0)

nudela-aahaf0gf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163708...

Malicious code in teagood-nalikoli143 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c09d61eee8058ad92f7db524a0ea1b504532aff43d7edeb8bf18303939bf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c725f11a90f03c4138401e2c208b345a285c4abd8d189ccdcb45357c86556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8359fefddfe39daa01370660df2db0f52b7e9de7f1d7c0cedf6f34949e5822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af3165b4396e4a4a00bc09733261cb32ef93c587ca9888679662aee1f2980b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb2745c017b7efed0c36cffb2ae1620683420064cda78507ac04b3bcd1e844e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-iaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a3b86437a02431772340472e041f31a700621fa65081d948e7db488d33df72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e4eee72c5bf5135209536edfd210a92d537045d358441b64a8f44b6322a9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a4fa97f3c25ee35885ea88d0bf4b0e487634f12108a581bf616e9219c8ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasrul-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea03278fa43cf2dc20376f483513425ef4b1893b51b6c1f53d5548c76df7fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c684972106f4dcc5670133ab4e0fa7d11d34a8367a2412a42124cf2e0b6251af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9d086d521a6cb92a5ff923e016a9f103fa3cb72a7d6b12ee92e9ecae241160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af35163fc0f1c6c0a36018602abf9885416dccc04d5837187a9b2f8ce11889a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauasu-ofarfqrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c88296745e6777a3ebb89a66879f61ca09cfd39b56da9ca6f959a3355aef51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tdisp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d774a3d1bac4b10e73e7bf584bc487a3ff818430a3514d158c8a2270bb3a447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idadasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd36ead345045fe2303a9cbe2b5d9288622882f9360cf5a8bb21f0dbc892744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...